build(deps): bump @angular/core from 20.3.25 to 20.3.27 in /example/ionic-angular-v7 - #1365
Conversation
Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) from 20.3.25 to 20.3.27. - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/core) --- updated-dependencies: - dependency-name: "@angular/core" dependency-version: 20.3.27 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit e6e3d3d. Configure here.
| "dependencies": { | ||
| "@angular/common": "^20.3.16", | ||
| "@angular/core": "^20.3.16", | ||
| "@angular/core": "^20.3.27", |
There was a problem hiding this comment.
Angular packages version skew
Medium Severity
Only @angular/core is bumped to 20.3.27 while @angular/common, @angular/compiler, @angular/forms, @angular/platform-browser, and related packages remain locked at 20.3.25. Those packages declare exact peer dependencies on @angular/core@20.3.25, and @angular/core@20.3.27 peers @angular/compiler@20.3.27, so this leaves the example in an inconsistent Angular framework set that Yarn can warn on and that Angular expects to stay version-aligned.
Additional Locations (2)
Reviewed by Cursor Bugbot for commit e6e3d3d. Configure here.


Bumps @angular/core from 20.3.25 to 20.3.27.
Release notes
Sourced from @angular/core's releases.
Changelog
Sourced from @angular/core's changelog.
... (truncated)
Commits
db0d4a1fix(compiler): restrict possible event handler check to property names longer...5dbcd0efix(compiler): disallow i18n event attributes8eb7aeafix(core): reject dynamic script host elements26831d0fix(core): avoid caching missing locale dataDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.